CVE-2026-53298: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()

Published Jun 26, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net: airoha: Move ndesc initialization at end of airohaqdmainitrxqueue()

If queue entry or DMA descriptor list allocation fails in airohaqdmainitrxqueue routine, airohaqdmacleanup() will trigger a NULL pointer dereference running netifnapidel() for RX queue NAPIs since netifnapiadd() has never been executed to this particular RX NAPI. The issue is due to the early ndesc initialization in airohaqdmainitrxqueue() since airohaqdmacleanup() relies on ndesc value to check if the queue is properly initialized. Fix the issue moving ndesc initialization at end of airohaqdmainittx routine. Move pagepool allocation after descriptor list allocation in order to avoid memory leaks if desc allocation fails.

Affected Software

4 affected components
Linux Linux kernel
Linux Linux kernel>=6.11<6.12.91
Linux Linux kernel>=6.13<6.18.33
Linux Linux kernel>=6.19<7.0.10

Event History

Jun 26, 2026
CVE Published
via MITRE·07:40 PM
Data Sourced
via MITRE·07:40 PM
Description
Data Sourced
via NVD·08:17 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-53298?

CVE-2026-53298 has a severity rating of 11, indicating a critical risk.

2

How do I fix CVE-2026-53298?

To mitigate CVE-2026-53298, ensure that you update to the patched version of the Linux kernel where the vulnerability has been resolved.

3

What type of vulnerability is CVE-2026-53298?

CVE-2026-53298 is classified as a Null Pointer Dereference vulnerability.

4

Which software is affected by CVE-2026-53298?

CVE-2026-53298 affects the Linux kernel.

5

What is the impact of CVE-2026-53298?

The impact of CVE-2026-53298 can lead to a NULL pointer dereference, potentially causing system instability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203